Description

Cross-site scripting (XSS) vulnerability in the admin CGI script for Mailman before 2.1.4 allows remote attackers to steal session cookies and conduct unauthorized activities.

Remediation

References

CVE-2003-0965

Related Vulnerabilities

WordPress Plugin Nextend Twitter Connect Cross-Site Scripting (1.5.0)

PHP Use of Externally-Controlled Format String Vulnerability (CVE-2010-2950)

Apache HTTP Server CVE-2004-0786 Vulnerability (CVE-2004-0786)

Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-5692)

WordPress Plugin WP Reset-Most Advanced WordPress Reset Tool Cross-Site Scripting (1.86)

Severity

Medium

Classification

CVE-2003-0965

Tags

Missing Update Known Vulnerabilities